Security audit

Jubilee Skill, By Jubilee Labs

Security checks for vulnerabilities and agentic risk

Overview

This skill is a real-money treasury-management guide whose core functions are disclosed, but it under-scopes safeguards around private keys, irreversible transfers, and recurring donation automation.

Review carefully before installing or using with any funded wallet. Use only a limited-balance operational wallet or managed signer, verify all chain/token/amount/vault/recipient values independently, avoid copying the sample donation address, and do not run scheduled donation automation unless you add spending limits, recipient allowlists, alerts, and manual approval controls.

A.I.G

Vulnerability Patterns

System PersistenceInstalls backdoors, hooks, services, or scheduled tasks that survive the run
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (3)

T09 · Insecure Skill Coding Practices

Error

Location: SKILL.md:189
Finding: Plaintext Private-Key Storage in a Predictable Wallet File
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Warning

Location: SKILL.md:124
Finding: Copyable Fund-Transfer Example Contains a Concrete Recipient Address
Content: View full analysis
Remediation: View remediation
`. 2. Make example commands fail safely unless the placeholder is replaced. 3. Require the tooling to display the resolved chain, token, amount, recipient address, and estimated fees before signing. 4. Require explicit interactive confirmation for new recipients and high-value transfers. 5. Support recipient allowlists or address-book entries with human-readable identities. 6. Warn users that blockchain addresses must be verified through an independent trusted channel. 7. Add transaction simulation and validate the destination chain before requesting a signature. ]]>

T06 · System Persistence

Warning

Location: SKILL.md:279
Finding: Unattended Recurring Transfers Are Recommended Without Financial Safety Controls
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: This skill describes real on-chain deposit, withdrawal, and transfer operations, including a donation flow to arbitrary recipient addresses, but it does not give a clear, prominent warning that blockchain transactions are irreversible and that mistakes in amount, chain, token, vault, or recipient address can permanently lose funds. In the context of treasury management, an agent or operator could follow these commands directly and send assets to the wrong address, wrong network, or withdraw principal unintentionally, making the omission materially dangerous rather than merely cosmetic.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.